urlquery.net - Free url scanner

Overview

URL	http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1
IP	69.65.109.143
ASN	AS14383 Virtacore Systems Inc
Location	United States
Report completed	2012-10-31 04:47:54 CET
Status	Loading report..
urlQuery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader	8.0
Java	1.6.0_26

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Snort /w Sourcefire VRT

Timestamp	Source IP	Destination IP	Severity	Alert
2012-10-31 04:47:19	69.65.109.138	urlQuery Client	1	FILE-IDENTIFY download of executable content - x-header
2012-10-31 04:47:19	69.65.109.138	urlQuery Client	3	FILE-IDENTIFY Portable Executable binary file magic detected

Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 69.65.109.143

Date	Alerts / IDS	URL	IP
2012-10-31 23:13:14	0 / 2	http://fileforum.betanews.com/sendfile/1298919978/1/1351678683.ba133752c189c587aefc59 (...)	69.65.109.143
2012-10-30 16:30:13	0 / 2	http://fileforum.betanews.com/sendfile/1075145986/1/asdinstall.exe	69.65.109.143

Last 6 reports on ASN: AS14383 Virtacore Systems Inc

Date	Alerts / IDS	URL	IP
2013-02-07 07:39:49	0 / 0	http://www.mol.mn	205.234.106.81
2013-02-06 17:49:36	0 / 0	http://www.methodsofhealing.com/natural-home-remedies-for-asthma/	74.204.174.141
2013-02-04 18:39:01	0 / 0	http://lopezlink.ph/components/com_fireboard/lndex.htm	74.200.83.241
2013-02-04 09:59:32	0 / 2	http://whoomp.org	69.65.107.209
2013-02-04 09:55:45	0 / 2	http://besties.org	69.65.107.209
2013-02-04 08:12:44	0 / 0	http://lopezlink.ph/components/com_fireboard/index.htm	74.200.83.241

Last 6 reports on domain: fileforum.betanews.com

Date	Alerts / IDS	URL	IP
2013-01-24 14:16:58	0 / 3	http://fileforum.betanews.com/download/Spybot-Search-Destroy/1043809773/1	199.19.67.136
2013-01-22 21:26:45	0 / 4	http://fileforum.betanews.com/sendfile/967963863/1/1358851611.25f47a8ff152594ea9d32e029aa12d15f (...)	199.19.67.136
2013-01-16 10:53:15	0 / 5	http://fileforum.betanews.com/download/BurnAware_Free/1212419334/2	199.19.67.136
2013-01-14 20:00:59	0 / 2	http://fileforum.betanews.com/sendfile/1094057842/3/1358189614.56872934df491aeaf97c65f67a3a314a (...)	199.19.67.136
2013-01-13 07:53:40	0 / 2	http://fileforum.betanews.com/sendfile/1080441198/1/1358050812.c2310c395d2e1284d52c47200393f061 (...)	199.19.67.136
2013-01-12 16:38:33	0 / 3	http://fileforum.betanews.com/sendfile/967963863/1/1357999855.1398c978bafe1ea58f003b5c0b3404ed5 (...)	199.19.67.136

JavaScript

Executed Scripts (49)

Executed Evals (14)

#1 JavaScript::Eval (size: 11, repeated: 2)

+new Date()

#2 JavaScript::Eval (size: 31, repeated: 1)

/([\s{};()]|[-+]{2}|default)+/g

#3 JavaScript::Eval (size: 1, repeated: 1)

#4 JavaScript::Eval (size: 1, repeated: 1)

#5 JavaScript::Eval (size: 1, repeated: 1)

#6 JavaScript::Eval (size: 29, repeated: 1)

document.createElement('img')

#7 JavaScript::Eval (size: 35, repeated: 1)

document.createEvent('MouseEvents')

#8 JavaScript::Eval (size: 1, repeated: 1)

#9 JavaScript::Eval (size: 1, repeated: 1)

#10 JavaScript::Eval (size: 1, repeated: 1)

#11 JavaScript::Eval (size: 1, repeated: 1)

#12 JavaScript::Eval (size: 8344, repeated: 1)

var f = void 0,
    i, j = this,
    m = function(a, b) {
        var c = a.split("."),
            d = j;
        !(c[0] in d) && d.execScript && d.execScript("var " + c[0]);
        for (var e; c.length && (e = c.shift());)!c.length && b !== f ? d[e] = b : d = d[e] ? d[e] : d[e] = {}
    },
    n = function(a) {
        var b = typeof a;
        if ("object" == b) if (a) {
            if (a instanceof Array) return "array";
            if (a instanceof Object) return b;
            var c = Object.prototype.toString.call(a);
            if ("[object Window]" == c) return "object";
            if ("[object Array]" == c || "number" == typeof a.length && "undefined" != typeof a.splice && "undefined" != typeof a.propertyIsEnumerable && !a.propertyIsEnumerable("splice")) return "array";
            if ("[object Function]" == c || "undefined" != typeof a.call && "undefined" != typeof a.propertyIsEnumerable && !a.propertyIsEnumerable("call")) return "function"
        } else return "null";
        else if ("function" == b && "undefined" == typeof a.call) return "object";
        return b
    },
    p = Date.now ||
function() {
    return +new Date
};
new function() {
    p()
};
var q = function(a) {
        a = a.replace(/\r\n/g, "\n");
        for (var b = [], c = 0, d = 0; d < a.length; d++) {
            var e = a.charCodeAt(d);
            128 > e ? b[c++] = e : (2048 > e ? b[c++] = e >> 6 | 192 : (b[c++] = e >> 12 | 224, b[c++] = e >> 6 & 63 | 128), b[c++] = e & 63 | 128)
        }
        return b
    };
var v = function(a) {
        try {
            if (this.c = [], r(this, this.b, 0), r(this, this.j, 0), r(this, this.n, 0), r(this, this.i, []), r(this, this.f, []), r(this, this.D, {}), r(this, this.C, "object" == typeof window ? window : j), r(this, this.F, this), r(this, this.p, 0), r(this, this.A, 0), r(this, this.B, 0), r(this, this.h, [s(), s(), s(), s()]), r(this, this.m, []), r(this, this.k, {}), a && "!" == a[0]) this.e = a;
            else {
                var b;
                if (window.atob) {
                    var c = window.atob(a);
                    a = [];
                    for (var d = 0, e = 0; e < c.length; e++) {
                        for (var g = c.charCodeAt(e); 255 < g;) a[d++] = g & 255, g >>= 8;
                        a[d++] = g
                    }
                    b = a
                } else b = null;
                this.d = b;
                !this.d || !this.d.length ? t(this, this.O) : this.o()
            }
        } catch (h) {
            u(this, h)
        }
    };
i = v.prototype;
i.N = [function() {}, function(a) {
    var b = w(a),
        c = w(a),
        d = a.a(b),
        b = y(a, b),
        e = y(a, c);
    e == a.g || e == a.l ? d = "" + d : 0 < b && (1 == b ? d &= 255 : 2 == b ? d &= 65535 : 4 == b && (d &= 4294967295));
    r(a, c, d)
}, function(a) {
    var b = w(a),
        c = y(a, b);
    if (0 < c) {
        for (var d = 0, e = 0; e < c; e++) d = d << 8 | w(a);
        r(a, b, d)
    } else if (c != a.r) {
        d = w(a) << 8 | w(a);
        if (c == a.g) if (c = "", a.c[a.s] != f) for (var g = a.a(a.s), e = 0; e < d; e++) var h = g[w(a) << 8 | w(a)],
            c = c + h;
        else {
            c = Array(d);
            for (e = 0; e < d; e++) c[e] = w(a);
            e = c;
            d = [];
            for (g = c = 0; c < e.length;) if (h = e[c++], 128 > h) d[g++] = String.fromCharCode(h);
            else if (191 < h && 224 > h) {
                var l = e[c++];
                d[g++] = String.fromCharCode((h & 31) << 6 | l & 63)
            } else {
                var l = e[c++],
                    k = e[c++];
                d[g++] = String.fromCharCode((h & 15) << 12 | (l & 63) << 6 | k & 63)
            }
            c = d.join("")
        } else {
            c = Array(d);
            for (e = 0; e < d; e++) c[e] = w(a)
        }
        r(a, b, c)
    }
}, function(a) {
    w(a)
}, function(a) {
    var b = w(a),
        c = w(a),
        d = w(a),
        b = a.a(b),
        c = a.a(c);
    r(a, d, b[c])
}, function(a) {
    var b = w(a),
        c = w(a),
        b = a.a(b);
    r(a, c, n(b))
}, function(a) {
    var b = w(a),
        c = w(a),
        d = a.a(b);
    y(a, b) == a.g && (d = q(d));
    b = d;
    for (d = 0; 12 > d; d++) b.push(0);
    for (var e = 2654435769, g = 2654435769, h = 314159265, d = 0; d < b.length - 11; d += 12) e += z(b, d), g += z(b, d + 4), h += z(b, d + 8), e -= g, e -= h, e ^= h >>> 13, g -= h, g -= e, g ^= e << 8, h -= e, h -= g, h ^= g >>> 13, -1 > d && alert(e + g + h), e -= g, e -= h, e ^= h >>> 12, g -= h, g -= e, g ^= e << 16, h -= e, h -= g, h ^= g >>> 5, -1 > d && alert(e + g + h), e -= g, e -= h, e ^= h >>> 3, g -= h, g -= e, g ^= e << 10, h -= e, h -= g, h ^= g >>> 15;
    r(a, c, h)
}, function(a) {
    var b = w(a),
        c = w(a),
        d = y(a, b),
        e = y(a, c);
    d == a.g && e == a.g ? (a.c[c] == f && r(a, c, ""), r(a, c, a.a(c) + a.a(b))) : e == a.l && (0 > d ? (b = a.a(b), d == a.g && (b = q("" + b)), (c == a.f || c == a.h || c == a.m) && A(a, c, B(b.length, 2)), A(a, c, b)) : 0 < d && (b = a.a(b), A(a, c, B(b, d))))
}, function(a) {
    var b = w(a),
        c = w(a);
    r(a, c, eval(a.a(b)))
}, function(a) {
    var b = w(a),
        c = w(a);
    r(a, c, a.a(c) - a.a(b))
}, function(a) {
    var b = C(a),
        c = b.K.apply(b.self, b.z);
    r(a, b.L, c)
}, function(a) {
    var b = w(a),
        c = w(a);
    r(a, c, a.a(c) % a.a(b))
}, function(a) {
    var b = a.a(w(a)),
        c = a.a(w(a)),
        d = a.a(w(a)),
        e = a.a(w(a));
    b.addEventListener(c, D(a, d, e), false)
}, function(a) {
    var b = a.a(w(a)),
        c = a.a(w(a));
    a = a.a(w(a));
    b[c] = a
}, function() {}, function(a) {
    var b = w(a),
        c = w(a);
    r(a, c, a.a(c) + a.a(b))
}, function(a) {
    var b = w(a),
        c = w(a);
    0 != a.a(b) && r(a, a.b, a.a(c))
}, function(a) {
    var b = w(a),
        c = w(a),
        d = w(a);
    a.a(b) == a.a(c) && r(a, d, a.a(d) + 1)
}, function(a) {
    var b = w(a),
        c = w(a),
        d = w(a);
    a.a(b) > a.a(c) && r(a, d, a.a(d) + 1)
}, function(a) {
    var b = w(a),
        c = w(a),
        d = w(a);
    r(a, d, a.a(b) << c)
}, function(a) {
    var b = w(a),
        c = w(a),
        d = w(a);
    r(a, d, a.a(b) | a.a(c))
}, function(a) {
    var b = a.a(w(a));
    a.G.push(a.c.slice());
    a.c[a.b] = f;
    r(a, a.b, b)
}, function(a) {
    var b = a.G.pop();
    if (b) {
        for (var c = w(a); 0 < c; c--) {
            var d = w(a);
            b[d] = a.c[d]
        }
        a.c = b
    } else r(a, a.b, a.d.length)
}, function(a) {
    var b = w(a),
        c = w(a),
        d = w(a);
    r(a, d, (a.a(b) in a.a(c)) + 0)
}, function(a) {
    var b = w(a),
        c = a.a(w(a)),
        d = a.a(w(a));
    r(a, b, D(a, c, d))
}, function(a) {
    var b = w(a),
        c = w(a);
    r(a, c, a.a(c) * a.a(b))
}, function(a) {
    var b = w(a),
        c = w(a),
        d = w(a);
    r(a, d, a.a(b) >> c)
}, function(a) {
    var b = w(a),
        c = w(a),
        d = w(a);
    r(a, d, a.a(b) || a.a(c))
}, function(a) {
    var b = C(a),
        c = b.z,
        d = b.self,
        e = b.K,
        g = "";
    switch (c.length) {
    case 0:
        g = new d[e];
        break;
    case 1:
        g = new d[e](c[0]);
        break;
    case 2:
        g = new d[e](c[0], c[1]);
        break;
    case 3:
        g = new d[e](c[0], c[1], c[2]);
        break;
    default:
        t(a, a.u);
        return
    }
    r(a, b.L, g)
}];
i.b = 0;
i.n = 1;
i.i = 2;
i.j = 3;
i.f = 4;
i.s = 5;
i.J = 6;
i.D = 7;
i.H = 8;
i.C = 9;
i.F = 10;
i.p = 11;
i.A = 12;
i.B = 13;
i.h = 14;
i.m = 15;
i.k = 16;
i.Y = 17;
i.P = 15;
i.W = 12;
i.Q = 10;
i.R = 42;
i.aa = 0;
i.Z = 1;
i.$ = 2;
i.ba = 3;
i.da = 5;
i.ca = 6;
i.g = -1;
i.l = -2;
i.r = -3;
i.O = 17;
i.M = 21;
i.u = 22;
i.fa = 30;
i.U = 31;
i.X = 32;
i.q = {};
i.v = "caller";
i.S = 0;
var u = function(a, b) {
        a.e = ("E:" + b.message + ":" + b.stack).substring(0, 2048)
    },
    s = function() {
        return 255 * Math.random() | 0
    },
    E = function(a, b, c) {
        for (var d = 0; 84941944608 != d;) a += (b << 4 ^ b >>> 5) + b ^ d + c[d & 3], d += 2654435769, b += (a << 4 ^ a >>> 5) + a ^ d + c[d >>> 11 & 3];
        return [a >>> 24, a >> 16 & 255, a >> 8 & 255, a & 255, b >>> 24, b >> 16 & 255, b >> 8 & 255, b & 255]
    },
    z = function(a, b) {
        return a[b] << 24 | a[b + 1] << 16 | a[b + 2] << 8 | a[b + 3]
    },
    B = function(a, b) {
        for (var c = [], d = b - 1; 0 <= d; d--) c[b - 1 - d] = a >> 8 * d & 255;
        return c
    },
    A = function(a, b, c, d) {
        var e = a.a(b);
        b = b == a.h ?
        function(b) {
            var c = e.length;
            if (4 == c % 8) {
                var d = 8 > c ? 0 : z(e, c - 8),
                    k = z(e, c - 4),
                    x = [0, 0, 0, a.a(a.B)];
                e.ea = E(d, k, x)
            }
            e.push(b ^ e.ea[c % 8])
        } : function(a) {
            e.push(a)
        };
        d && b(d & 255);
        for (d = 0; d < c.length; d++) b(c[d])
    },
    r = function(a, b, c) {
        if (b == a.b || b == a.j) if (a.c[b]) a.c[b].T(c);
        else {
            var d = c;
            c = function() {
                return e()
            };
            var e = function() {
                    return d
                };
            c.T = function(a) {
                d = a
            };
            a.c[b] = c
        } else {
            var g = a.a,
                h = function() {
                    for (var a = l[k.v], b = a === g, a = a && a[k.v], c = 0; a && a != k.o && a != k.I && a != v && 20 > c;) c++, a = a[k.v];
                    return h[!b + !a + (c >> 2)]
                },
                l = function() {
                    return h()
                },
                k = v.prototype;
            h[k.S] = c;
            a.c[b] = l
        }
        b == a.n && (a.t = f, r(a, a.b, a.a(a.b) + 4))
    };
v.prototype.a = function(a) {
    var b = this.c[a];
    if (b === f) throw t(this, this.fa, 0, a), this.q;
    return b()
};
var t = function(a, b, c, d) {
        var e = a.a(a.j);
        b = [b, e >> 8 & 255, e & 255];
        d != f && b.push(d);
        r(a, a.i, b);
        a.d && r(a, a.b, a.d.length);
        c && (d = "", c.message && (d = c.message.toString()), c.stack != f && (d += ": " + c.stack), d = d.substring(0, 2048), d = q(d), A(a, a.h, B(d.length, 2).concat(d), a.W))
    },
    w = function(a) {
        var b = a.a(a.b);
        if (b >= a.d.length) throw t(a, a.U, 0, b), a.q;
        a.t == f && (a.t = z(a.d, b - 4), a.w = f);
        if (a.w != b >> 3) {
            a.w = b >> 3;
            var c = [0, 0, 0, a.a(a.n)];
            a.V = E(a.t, a.w, c)
        }
        r(a, a.b, b + 1);
        return a.d[b] ^ a.V[b % 8]
    },
    y = function(a, b) {
        if (b <= a.Y) return b == a.i || b == a.f || b == a.h || b == a.m ? a.l : b == a.J || b == a.D || b == a.C || b == a.F || b == a.k ? a.r : b == a.s ? a.g : 4;
        var c = b % a.ca;
        return c == a.aa ? 1 : c == a.Z ? 2 : c == a.$ ? 4 : c == a.da ? a.g : c == a.ba ? a.l : a.r
    },
    C = function(a) {
        var b = {};
        b.K = a.a(w(a));
        b.L = w(a);
        var c = w(a) - 1;
        b.self = a.a(w(a));
        for (b.z = []; 0 < c;) c--, b.z.push(a.a(w(a)));
        return b
    },
    D = function(a, b, c) {
        return function() {
            r(a, a.J, arguments);
            r(a, a.k, c);
            return F(a, b)
        }
    },
    F = function(a, b) {
        var c = a.a(a.b);
        a.d && c < a.d.length && (r(a, a.j, c), t(a, a.X));
        r(a, a.b, b);
        return a.o()
    };
v.prototype.o = function() {
    this.G = [];
    try {
        var a = this.d.length;
        0 < this.a(this.i).length && r(this, this.b, a);
        for (var b = this.N, c = 0;
        (c = this.a(this.b)) < a;) try {
            r(this, this.j, c);
            var d = w(this),
                e = b[d];
            e ? e(this) : t(this, this.M, 0, d)
        } catch (g) {
            if (g != this.q) {
                var h = this.a(this.p);
                h ? (r(this, h, g), r(this, this.p, 0)) : t(this, this.u, g)
            }
        }
    } catch (l) {
        try {
            t(this, this.u, l)
        } catch (k) {
            u(this, k)
        }
    }
    return this.a(this.k)
};
v.prototype.I = function() {
    if (this.e) return this.e;
    try {
        this.c[this.H] && F(this, this.a(this.H));
        var a = this.a(this.i);
        0 < a.length && A(this, this.f, B(a.length, 2).concat(a), this.P);
        var b = this.a(this.A),
            b = b - (this.a(this.f).length + 4),
            c = this.a(this.h);
        4 < c.length && (b -= c.length + 3);
        if (0 < b) {
            for (var d = Array(b), e = 0; e < b; e++) d[e] = s();
            A(this, this.f, B(b, 2).concat(d), this.Q)
        }
        4 < c.length && A(this, this.f, B(c.length, 2).concat(c), this.R);
        var g = [3].concat(this.a(this.f)),
            h;
        var l;
        window.btoa ? (l = window.btoa(String.fromCharCode.apply(null, g)), h = l = l.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")) : h = null;
        if (this.e = h) this.e = "!" + this.e;
        else {
            this.e = "";
            for (e = 0; e < g.length; e++) {
                var k = g[e].toString(16);
                1 == k.length && (k = "0" + k);
                this.e += k
            }
        }
    } catch (x) {
        u(this, x)
    }
    return this.e
};
v.prototype.ga = function(a) {
    a(this.I())
};
try {
    window.addEventListener("unload", function() {}, false)
} catch (G) {}
m("botguard.bg", v);
m("botguard.bg.prototype.invoke", v.prototype.ga);

#13 JavaScript::Eval (size: 1, repeated: 1)

#14 JavaScript::Eval (size: 1, repeated: 1)

Executed Writes (25)

#1 JavaScript::Write (size: 1, repeated: 1)

#2 JavaScript::Write (size: 872, repeated: 1)

&nbsp;&nbsp;<a href="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&format=fp_al_lp&output=html&h=15&w=728&lmt=1351655234&channel=3309604794&ea=0&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655235990&bpp=10&shv=r20121023&jsv=r20110914&correlator=1351655236527&frm=20&adk=1899358758&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=216&ady=259&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=543&kw_type=radlink&prev_fmts=728x15_0ads_al_s&rt=ChBQkJ9EAA5knwrMXQgZAF9VEgpDb2RlYyBQYWNrGggiw9131gdgoCDW9YHHAigBSNb1gccCUhMInuPzkayqswIVwlrMCh3eOwAX&hl=en&kw0=Codec+Pack&kw1=DivX+Codec&kw2=Codec+%27S&kw3=Anti+Malware&okw=Codec+Pack" class=alt target=_top>

#3 JavaScript::Write (size: 872, repeated: 1)

&nbsp;&nbsp;<a href="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&format=fp_al_lp&output=html&h=15&w=728&lmt=1351655234&channel=3309604794&ea=0&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655235990&bpp=10&shv=r20121023&jsv=r20110914&correlator=1351655236527&frm=20&adk=1899358758&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=216&ady=259&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=543&kw_type=radlink&prev_fmts=728x15_0ads_al_s&rt=ChBQkJ9EAA5kqArMXQgZAF9VEgpEaXZYIENvZGVjGgganZ_tsoZDPCDW9YHHAigBSNb1gccCUhMInuPzkayqswIVwlrMCh3eOwAX&hl=en&kw0=Codec+Pack&kw1=DivX+Codec&kw2=Codec+%27S&kw3=Anti+Malware&okw=DivX+Codec" class=alt target=_top>

#4 JavaScript::Write (size: 870, repeated: 1)

&nbsp;&nbsp;<a href="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&format=fp_al_lp&output=html&h=15&w=728&lmt=1351655234&channel=3309604794&ea=0&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655235990&bpp=10&shv=r20121023&jsv=r20110914&correlator=1351655236527&frm=20&adk=1899358758&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=216&ady=259&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=543&kw_type=radlink&prev_fmts=728x15_0ads_al_s&rt=ChBQkJ9EAA5kqgrMXQgZAF9VEghDb2RlYyAnUxoI1vMvat8eVZ4g1vWBxwIoAUjW9YHHAlITCJ7j85GsqrMCFcJazAod3jsAFw&hl=en&kw0=Codec+Pack&kw1=DivX+Codec&kw2=Codec+%27S&kw3=Anti+Malware&okw=Codec+%27S" class=alt target=_top>

#5 JavaScript::Write (size: 877, repeated: 1)

&nbsp;&nbsp;<a href="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&format=fp_al_lp&output=html&h=15&w=728&lmt=1351655234&channel=3309604794&ea=0&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655235990&bpp=10&shv=r20121023&jsv=r20110914&correlator=1351655236527&frm=20&adk=1899358758&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=216&ady=259&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=543&kw_type=radlink&prev_fmts=728x15_0ads_al_s&rt=ChBQkJ9EAA5krArMXQgZAF9VEgxBbnRpIE1hbHdhcmUaCLNQ-kjvbL0dINb1gccCKAFI1vWBxwJSEwie4_ORrKqzAhXCWswKHd47ABc&hl=en&kw0=Codec+Pack&kw1=DivX+Codec&kw2=Codec+%27S&kw3=Anti+Malware&okw=Anti+Malware" class=alt target=_top>

#6 JavaScript::Write (size: 667, repeated: 1)

<!doctype html><html><body><script>google_ad_channel="3309604794";google_ad_client="pub-6676241418785266";google_ad_format="728x15_0ads_al_s";google_ad_height=15;google_ad_width=728;google_alternate_color="FFFFFF";google_color_bg="FFFFFF";google_color_border="FFFFFF";google_color_link="273595";google_color_text="000000";google_color_url="273595";google_show_ads_impl=true;google_unique_id=1;google_async_iframe_id="aswift_0";google_ad_unit_key="1899358758";google_start_time=1351655235990;google_expand_experiment="none";google_bpp=10;</script><script src="http://pagead2.googlesyndication.com/pagead/js/r20121023/r20120730/show_ads_impl.js"></script></body></html>

#7 JavaScript::Write (size: 461, repeated: 1)

<!doctype html><html><body><script>google_ad_client="pub-6676241418785266";google_ad_height=250;google_ad_slot="9170927344";google_ad_width=300;google_show_ads_impl=true;google_unique_id=2;google_async_iframe_id="aswift_1";google_ad_unit_key="125814845";google_start_time=1351655236201;google_expand_experiment="none";google_bpp=4;</script><script src="http://pagead2.googlesyndication.com/pagead/js/r20121023/r20120730/show_ads_impl.js"></script></body></html>

#8 JavaScript::Write (size: 54, repeated: 1)

<!doctype html><html><head></head><body></body></html>

#9 JavaScript::Write (size: 10, repeated: 1)

</script>

#10 JavaScript::Write (size: 311, repeated: 1)

<a href="http://adserver.adtechus.com/?adlink/5159/425713/0/225/AdId=3347913;BnId=28;itime=655234118;key=key1+key2+key3+key4;" target="_blank"><img src="http://aka-cdn-ns.adtechus.com/images/457/Ad3347913St1Sz225Sq21692328V0Id28.gif" border="0" alt="Speed Up Your PC - click here!" width="728" height="90"/></a>

#11 JavaScript::Write (size: 877, repeated: 1)

<iframe allowtransparency=true frameborder=0 height=250 hspace=0 id=google_ads_frame2 marginheight=0 marginwidth=0 name=google_ads_frame2 scrolling=no src="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com" style="left:0;position:absolute;top:0" vspace=0 width=300></iframe>

#12 JavaScript::Write (size: 918, repeated: 1)

<iframe id="google_ads_frame1" name="google_ads_frame1" width="728" height="15" frameborder="0" src="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&format=728x15_0ads_al_s&output=html&h=15&w=728&lmt=1351655234&channel=3309604794&ea=0&alt_color=FFFFFF&color_bg=FFFFFF&color_border=FFFFFF&color_link=273595&color_text=000000&color_url=273595&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655235990&bpp=10&shv=r20121023&jsv=r20110914&correlator=1351655236527&frm=20&adk=1899358758&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=216&ady=259&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=543" marginwidth="0" marginheight="0" vspace="0" hspace="0" allowtransparency="true" scrolling="no"></iframe>

#13 JavaScript::Write (size: 815, repeated: 1)

<ins style="display:inline-table;border:none;height:15px;margin:0;padding:0;position:relative;visibility:visible;width:728px"><ins id="aswift_0_anchor" style="display:block;border:none;height:15px;margin:0;padding:0;position:relative;visibility:visible;width:728px"><iframe allowtransparency="true" frameborder="0" height="15" hspace="0" marginwidth="0" marginheight="0" onload="var i=this.id,s=window.google_iframe_oncopy,H=s&amp;&amp;s.handlers,h=H&amp;&amp;H[i],w=this.contentWindow,d;try{d=w.document}catch(e){}if(h&amp;&amp;d&amp;&amp;(!d.body||!d.body.firstChild)){if(h.call){i+='.call';setTimeout(h,0)}else if(h.match){i+='.nav';w.location.replace(h)}s.log&amp;&amp;s.log.push(i)}" scrolling="no" vspace="0" width="728" id=aswift_0 name=aswift_0 style="left:0;position:absolute;top:0;" ></iframe></ins></ins>

#14 JavaScript::Write (size: 818, repeated: 1)

<ins style="display:inline-table;border:none;height:250px;margin:0;padding:0;position:relative;visibility:visible;width:300px"><ins id="aswift_1_anchor" style="display:block;border:none;height:250px;margin:0;padding:0;position:relative;visibility:visible;width:300px"><iframe allowtransparency="true" frameborder="0" height="250" hspace="0" marginwidth="0" marginheight="0" onload="var i=this.id,s=window.google_iframe_oncopy,H=s&amp;&amp;s.handlers,h=H&amp;&amp;H[i],w=this.contentWindow,d;try{d=w.document}catch(e){}if(h&amp;&amp;d&amp;&amp;(!d.body||!d.body.firstChild)){if(h.call){i+='.call';setTimeout(h,0)}else if(h.match){i+='.nav';w.location.replace(h)}s.log&amp;&amp;s.log.push(i)}" scrolling="no" vspace="0" width="300" id=aswift_1 name=aswift_1 style="left:0;position:absolute;top:0;" ></iframe></ins></ins>

#15 JavaScript::Write (size: 86, repeated: 1)

<script src="http://pagead2.googlesyndication.com/pagead/expansion_embed.js"></script>

#16 JavaScript::Write (size: 80, repeated: 1)

<script src="http://partner.googleadservices.com/gampad/google_ads.js"></script>

#17 JavaScript::Write (size: 65, repeated: 1)

<script src='http://b.scorecardresearch.com/beacon.js' ></script>

#18 JavaScript::Write (size: 78, repeated: 1)

<script src='http://p.chango.com/static/c.js' type='text/javascript'></script>

#19 JavaScript::Write (size: 84, repeated: 1)

<script src='http://www.google-analytics.com/ga.js' type='text/javascript'></script>

#20 JavaScript::Write (size: 94, repeated: 1)

<script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js">

#21 JavaScript::Write (size: 97, repeated: 1)

<script type="text/javascript" src="http://static.crowdscience.com/start-b0979864e7.js"></script>

#22 JavaScript::Write (size: 108, repeated: 1)

<script type="text/javascript" src="http://track.netshelter.net/js/incl/fileforums.com-include.js"></script>

#23 JavaScript::Write (size: 106, repeated: 1)

<script type="text/javascript">COMSCORE.beacon({c1:2,c2:6036316,c3:"",c4:"",c5:"",c6:"",c15:""});</script>

#24 JavaScript::Write (size: 257, repeated: 1)

<script type="text/javascript">var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script>

#25 JavaScript::Write (size: 105, repeated: 2)

<script>google_protectAndRun("ads_core.google_render_ad", google_handleError, google_render_ad);</script>

HTTP Transactions (81)

Request	Response
GET /download/Malwarebytes-AntiMalware/1186760019/1 HTTP/1.1 Host: fileforum.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html Date: Wed, 31 Oct 2012 03:47:14 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch X-Powered-By: PHP/5.3.3-7+squeeze3 Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Wed, 31 Oct 2012 03:47:14 GMT Cache-Control: private, must-revalidate, pre-check=0, post-check=0 Set-Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40; path=/; domain=.betanews.com Pragma: no-cache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3761 Connection: close
GET /js/sites/fileforums.com.js HTTP/1.1 Host: track.netshelter.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.0 200 OK Content-Type: application/x-javascript Content-Length: 1416 Connection: keep-alive x-amz-id-2: ls3U823BcWHhkccjifdB+f04BNOkItK2sheerJB0gdtXI4GLKZHljvnN5Zm16iAB x-amz-request-id: 52CFE640B95344DC Date: Mon, 18 Jun 2012 21:43:51 GMT x-amz-meta-cb-modifiedtime: Wed, 13 Jun 2012 00:13:31 GMT Cache-Control: must-revalidate, max-age=86400 Last-Modified: Mon, 18 Jun 2012 19:04:14 GMT Etag: "11df63fcad695a5f239c61699497a3e9" Accept-Ranges: bytes Server: AmazonS3 Age: 12471 X-Amz-Cf-Id: Mt9-qGLS8QEBeF7bHWG2bKqcxStF_5oWv6sG8Fl0PveGLLFobs7RTg== Via: 1.0 1a063c8feb249f6476de771ccb673963.cloudfront.net (CloudFront) X-Cache: Hit from cloudfront
GET /pagead/show_ads.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 If-None-Match: 15032493890200785914	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Etag: 9126965438495742694 Date: Wed, 31 Oct 2012 03:22:31 GMT Expires: Wed, 31 Oct 2012 04:22:31 GMT X-Content-Type-Options: nosniff Content-Disposition: attachment Content-Encoding: gzip Server: cafe Content-Length: 5351 X-XSS-Protection: 1; mode=block Age: 1483 Cache-Control: public, max-age=3600
GET /gampad/google_service.js HTTP/1.1 Host: partner.googleadservices.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Etag: 11399227633331393822 Date: Wed, 31 Oct 2012 02:50:52 GMT Expires: Wed, 31 Oct 2012 03:50:52 GMT X-Content-Type-Options: nosniff Content-Disposition: attachment Content-Encoding: gzip Server: cafe Content-Length: 1659 X-XSS-Protection: 1; mode=block Age: 3382 Cache-Control: public, max-age=3600
GET /urchin.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 6847 Content-Encoding: gzip Last-Modified: Wed, 19 Sep 2012 11:51:40 GMT X-Content-Type-Options: nosniff, nosniff Date: Thu, 25 Oct 2012 07:20:31 GMT Expires: Thu, 08 Nov 2012 07:20:31 GMT Vary: Accept-Encoding Cache-Control: max-age=1209600, public Age: 505603 Server: GFE/2.0
GET /js/plusone.js HTTP/1.1 Host: apis.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 x-ua-compatible: IE=edge, chrome=1 Etag: "73bd74ea053671151d951f9647c7e61e" Expires: Wed, 31 Oct 2012 03:47:14 GMT Date: Wed, 31 Oct 2012 03:47:14 GMT Cache-Control: private, max-age=1800 Content-Encoding: gzip Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /addyn/3.0/5159.1/416180/0/170/ADTECH;alias=ff_id4_300x250;loc=100;target=_blank;key=key1+key2+key3+key4;grp=405369815 HTTP/1.1 Host: adserver.adtechus.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.0 302 Moved Temporarily HTTP/1.0 302 Moved Temporarily Connection: keep-alive P3P: CP="NOI DSP DEVa OUR BUS UNI COM NAV INT" Cache-Control: no-cache Location: http://adserver.adtechus.com/addyn/3.0/5159.1/416180/0/170/ADTECH;cfp=1;rndc=1351655234;alias=ff_id4_300x250;loc=100;target=_blank;key=key1+key2+key3+key4;grp=405369815 Content-Length: 0 Set-Cookie: CfP=1;domain=adserver.adtechus.com;path=/
GET /addyn/3.0/5159.1/416181/0/225/ADTECH;alias=ff_id4_728x90;loc=100;target=_blank;key=key1+key2+key3+key4;grp=405369815 HTTP/1.1 Host: adserver.adtechus.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.0 302 Moved Temporarily HTTP/1.0 302 Moved Temporarily Connection: keep-alive P3P: CP="NOI DSP DEVa OUR BUS UNI COM NAV INT" Cache-Control: no-cache Location: http://adserver.adtechus.com/addyn/3.0/5159.1/416181/0/225/ADTECH;cfp=1;rndc=1351655234;alias=ff_id4_728x90;loc=100;target=_blank;key=key1+key2+key3+key4;grp=405369815 Content-Length: 0 Set-Cookie: CfP=1;domain=adserver.adtechus.com;path=/
GET /stylesheets/ff_main.css HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 31 Oct 2012 03:47:15 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Tue, 09 Mar 2010 18:42:53 GMT Etag: "5fd70-2e8c-481628ca14540" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2410 Connection: close
GET /stylesheets/ff_detail.css HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 31 Oct 2012 03:47:15 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Mon, 23 Feb 2009 05:57:17 GMT Etag: "6000f-d4f-4638facc66940" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 936 Connection: close
GET /stylesheets/ff_browse.css HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 31 Oct 2012 03:47:15 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Tue, 20 Jan 2009 21:38:20 GMT Etag: "60031-1120-460f0dba0ab00" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1060 Connection: close
GET /stylesheets/ff_standard.css HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 31 Oct 2012 03:47:15 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Tue, 13 Jan 2009 17:29:11 GMT Etag: "60090-8d9-460608fb567c0" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 698 Connection: close
GET /stylesheets/standard.css HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 31 Oct 2012 03:47:15 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Fri, 16 Jan 2009 23:24:08 GMT Etag: "600a4-1094-460a1dea1f600" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1081 Connection: close
GET /stylesheets/main.css HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 31 Oct 2012 03:47:15 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 06 Jul 2011 11:16:28 GMT Etag: "5fd67-5723-4a764bb501b00" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4641 Connection: close
GET /addyn/3.0/5159.1/416180/0/170/ADTECH;cfp=1;rndc=1351655234;alias=ff_id4_300x250;loc=100;target=_blank;key=key1+key2+key3+key4;grp=405369815 HTTP/1.1 Host: adserver.adtechus.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: CfP=1	HTTP/1.0 200 OK Content-Type: application/x-javascript Connection: keep-alive Server: Adtech Adserver Cache-Control: no-cache P3P: CP="NOI DSP DEVa OUR BUS UNI COM NAV INT" Content-Length: 334 Set-Cookie: JEB2=5090945F6E651A59D48D8D35F00041BE;expires=Fri, 31 Oct 2014 3:47:14 GMT;domain=adserver.adtechus.com;path=/
GET /addyn/3.0/5159.1/416181/0/225/ADTECH;cfp=1;rndc=1351655234;alias=ff_id4_728x90;loc=100;target=_blank;key=key1+key2+key3+key4;grp=405369815 HTTP/1.1 Host: adserver.adtechus.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: CfP=1	HTTP/1.0 200 OK Content-Type: application/x-javascript Connection: keep-alive Server: Adtech Adserver Cache-Control: no-cache P3P: CP="NOI DSP DEVa OUR BUS UNI COM NAV INT" Content-Length: 334 Set-Cookie: JEB2=5090945F6E651A59D48D8D35F00041BE;expires=Fri, 31 Oct 2014 3:47:15 GMT;domain=adserver.adtechus.com;path=/
GET /betanews2/icon_feed.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:15 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "3ce6ba-33f-45fe6a5588000" Accept-Ranges: bytes Content-Length: 831 Connection: close
GET /resources/site.js HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: application/javascript Date: Wed, 31 Oct 2012 03:47:15 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Thu, 23 Jul 2009 20:33:17 GMT Etag: "17f558-14436-46f6565ca9d40" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 27731 Connection: close
GET /gampad/google_ads.js HTTP/1.1 Host: partner.googleadservices.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Etag: 9912233991238454549 Date: Wed, 31 Oct 2012 03:10:53 GMT Expires: Wed, 31 Oct 2012 04:10:53 GMT X-Content-Type-Options: nosniff Content-Disposition: attachment Content-Encoding: gzip Server: cafe Content-Length: 16722 X-XSS-Protection: 1; mode=block Age: 2182 Cache-Control: public, max-age=3600
GET /images/457/Ad3347913St1Sz225Sq21692328V0Id28.gif HTTP/1.1 Host: aka-cdn-ns.adtechus.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache Last-Modified: Wed, 26 Sep 2012 19:25:01 GMT Content-Length: 11373 Cache-Control: max-age=485865 Expires: Mon, 05 Nov 2012 18:45:01 GMT Date: Wed, 31 Oct 2012 03:47:16 GMT Connection: keep-alive
GET /en_US/all.js HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "09af11fded916ff4238f653a64bcbede" Content-Encoding: gzip X-FB-Debug: Dcj4yY+gi7KZaSMSt2Ms1k//D44YHvw/uC1MtnQL0X8= Content-Length: 57944 Cache-Control: public, max-age=690 Expires: Wed, 31 Oct 2012 03:58:46 GMT Date: Wed, 31 Oct 2012 03:47:16 GMT Connection: keep-alive Vary: Accept-Encoding
GET /pagead/js/r20121023/r20120730/show_ads_impl.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Etag: 2745567636224848067 Date: Fri, 26 Oct 2012 16:47:49 GMT Expires: Fri, 09 Nov 2012 16:47:49 GMT X-Content-Type-Options: nosniff Content-Disposition: attachment Content-Encoding: gzip Server: cafe Content-Length: 19353 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 385167
GET /connect/xd_arbiter.php?version=11 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: cnc3qMBWkgpfEDCb8e+AwK3jfCJ36tAvTGWSz7we1z0= Content-Length: 9688 Vary: Accept-Encoding Cache-Control: public, max-age=26149948 Expires: Thu, 29 Aug 2013 19:39:44 GMT Date: Wed, 31 Oct 2012 03:47:16 GMT Connection: keep-alive
GET /fileforum2/site_bg.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "117c05-220-45fe6a5588000" Accept-Ranges: bytes Content-Length: 544 Connection: close
GET /fileforum2/tab_betanews.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "117a92-6c0-45fe6a5588000" Accept-Ranges: bytes Content-Length: 1728 Connection: close
GET /fileforum2/tab_fileforum.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "117c09-739-45fe6a5588000" Accept-Ranges: bytes Content-Length: 1849 Connection: close
GET /betanews2/button_search.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "3ce6a6-681-45fe6a5588000" Accept-Ranges: bytes Content-Length: 1665 Connection: close
GET /fileforum2/userbox_bg.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "117a99-1816-45fe6a5588000" Accept-Ranges: bytes Content-Length: 6166 Connection: close
GET /fileforum2/ff_logo.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "117c04-1e4f-45fe6a5588000" Accept-Ranges: bytes Content-Length: 7759 Connection: close
GET /fileforum2/navbar_rightbg.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "117c0a-e3-45fe6a5588000" Accept-Ranges: bytes Content-Length: 227 Connection: close
GET /betanews2/navbar_bottombg.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "3ce6b4-ad-45fe6a5588000" Accept-Ranges: bytes Content-Length: 173 Connection: close
GET /fileforum2/tab_right.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "117bf8-11a-45fe6a5588000" Accept-Ranges: bytes Content-Length: 282 Connection: close
GET /betanews2/navbar_topbg.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "3ce6ae-8b-45fe6a5588000" Accept-Ranges: bytes Content-Length: 139 Connection: close
GET /__utm.gif?utmwv=1.4&utmn=15727571&utmcs=UTF-8&utmsr=1176x885&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmcn=1&utmdt=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&utmhn=fileforum.betanews.com&utmhid=742868084&utmr=-&utmp=/download/Malwarebytes-AntiMalware/1186760019/1&utmac=UA-135797-3&utmcc=__utma%3D37581239.15727571.1351655236.1351655236.1351655236.1%3B%2B__utmz%3D37581239.1351655236.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)%3B%2B HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=1.4&utmn=15727571&utmcs=UTF-8&utmsr=1176x885&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmcn=1&utmdt=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&utmhn=fileforum.betanews.com&utmhid=742868084&utmr=-&utmp=/download/Malwarebytes-AntiMalware/1186760019/1&utmac=UA-135797-3&utmcc=__utma%3D37581239.15727571.1351655236.1351655236.1351655236.1%3B%2B__utmz%3D37581239.1351655236.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)%3B%2B HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 25 Oct 2012 07:26:20 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 505256 Server: GFE/2.0
GET /insight.min.js HTTP/1.1 Host: js.bizographics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.0 200 OK Content-Type: application/x-javascript Content-Length: 23526 Connection: keep-alive x-amz-id-2: +NicX/I70ErTEqBuYD3XABE8VL0ULyrFDS0onBIwWW3Yq6BSUypO027WhOxL4Ixq x-amz-request-id: D7F7394C079C7EEB Date: Tue, 31 Jul 2012 19:32:50 GMT Cache-Control: max-age=300 Last-Modified: Fri, 04 Nov 2011 22:44:08 GMT Etag: "cbbd7d8681a092f4f251779904e5b130" Accept-Ranges: bytes Server: AmazonS3 Age: 3066 X-Amz-Cf-Id: SfE7yeI06BhuMwMTER1mXYgJE7sQR5K3C1Lm0t4ceLnpD-_XAV4MZQ== Via: 1.0 7e33bbfbaa7de3b565df77830e8f05f6.cloudfront.net (CloudFront) X-Cache: Hit from cloudfront
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Tue, 30 Oct 2012 19:20:30 GMT Expires: Wed, 31 Oct 2012 07:20:30 GMT Vary: Accept-Encoding Age: 30406 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /pagead/osd.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 If-None-Match: 13350759849962699205	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Etag: 18259867682941507172 Date: Wed, 31 Oct 2012 03:23:07 GMT Expires: Wed, 31 Oct 2012 04:23:07 GMT X-Content-Type-Options: nosniff Content-Disposition: attachment Content-Encoding: gzip Server: cafe Content-Length: 5981 X-XSS-Protection: 1; mode=block Age: 1449 Cache-Control: public, max-age=3600
GET /fileforum2/nav_bullet.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/ff_main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "117c0e-9f-45fe6a5588000" Accept-Ranges: bytes Content-Length: 159 Connection: close
GET /betanews2/navbar_break.png HTTP/1.1 Host: images.six.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://images.six.betanews.com/stylesheets/main.css Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 31 Oct 2012 03:47:16 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 07 Jan 2009 16:02:08 GMT Etag: "3ce6c2-b3-45fe6a5588000" Accept-Ranges: bytes Content-Length: 179 Connection: close
GET /_/apps-static/_/js/gapi/plusone/rt=j/ver=X922tXr8XTc.no./sv=1/am=!-5iK5mLqTdGIwAcTTA/d=1/rs=AItRSTP07LLsgSjzw74qXx8we1mze-bKkg/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Etag: "1540778713" Expires: Fri, 30 Nov 2012 02:24:45 GMT Date: Wed, 31 Oct 2012 02:24:45 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Cache-Control: public, max-age=2592000 Content-Length: 28214 Age: 4951
GET /pagead/expansion_embed.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Etag: 2372832783343406230 Date: Tue, 30 Oct 2012 07:20:37 GMT Expires: Wed, 31 Oct 2012 07:20:37 GMT X-Content-Type-Options: nosniff Content-Disposition: attachment Content-Encoding: gzip Server: cafe Content-Length: 25450 X-XSS-Protection: 1; mode=block Age: 73599 Cache-Control: public, max-age=86400
GET /js/incl/fileforums.com-include.js HTTP/1.1 Host: track.netshelter.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.0 200 OK Content-Type: application/x-javascript Content-Length: 199 Connection: keep-alive x-amz-id-2: O92ZDr7DZP9jw3UfWLyFMz85LwuW3Z4jsizM3J0W87YDuvdpAQtp3Ji8/NGIlCdC x-amz-request-id: 0042038D19A22F8C Date: Tue, 14 Jun 2011 22:01:02 GMT x-amz-meta-cb-modifiedtime: Fri, 23 Jul 2010 16:38:40 GMT Cache-Control: must-revalidate, max-age=86400 Last-Modified: Fri, 23 Jul 2010 16:44:17 GMT Etag: "5aa637b3a6c252585f88400bef5dd236" Accept-Ranges: bytes Server: AmazonS3 Age: 7265 X-Amz-Cf-Id: GQWre6lqTeLrw2XMoSXZvWOy0Y4Qot4TvaX86WbhaGy1KljEQizQyw== Via: 1.0 951bc6ecd5fb2c9732f14df07a0958a9.cloudfront.net:11180 (CloudFront), 1.0 1a063c8feb249f6476de771ccb673963.cloudfront.net (CloudFront) X-Cache: Hit from cloudfront
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Wed, 14 Nov 2012 03:47:16 GMT Date: Wed, 31 Oct 2012 03:47:16 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /static/c.js HTTP/1.1 Host: p.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: application/javascript x-amz-id-2: FFm9IviqhYrCiLbRWCXbVG6eHbeXx5q6eBIxwpT2cziK0liDWL1cJejtkeqgcQz9 x-amz-request-id: 469DA1F0F9727E96 Last-Modified: Wed, 18 Apr 2012 18:17:35 GMT Etag: "e79296b0213ce2305e06c54bc24a63d5" Accept-Ranges: bytes Content-Length: 646 Server: AmazonS3 Cache-Control: max-age=604800 Date: Wed, 31 Oct 2012 03:47:16 GMT Connection: keep-alive
GET /start-b0979864e7.js HTTP/1.1 Host: static.crowdscience.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: application/x-javascript Server: Apache Etag: "6d3fd752d4aab42cf37998cb0f2e124f:1329757519" Last-Modified: Mon, 20 Feb 2012 17:05:19 GMT Accept-Ranges: bytes Content-Length: 8028 Cache-Control: max-age=14400 Date: Wed, 31 Oct 2012 03:47:16 GMT Connection: keep-alive
GET /b?c1=2&c2=6036316&c3=&c4=&c5=&c6=&c15=&ns__t=1351655236877&ns_c=UTF-8&c8=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&c7=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&c9= HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=2&c2=6036316&c3=&c4=&c5=&c6=&c15=&ns__t=1351655236877&ns_c=UTF-8&c8=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&c7=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&c9= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=2&c2=6036316&c3=&c4=&c5=&c6=&c15=&ns__t=1351655236877&ns_c=UTF-8&c8=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&c7=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&c9= Date: Wed, 31 Oct 2012 03:47:16 GMT Connection: keep-alive Set-Cookie: UID=ab9c89d-195.159.219.9-1351655236; expires=Tue, 21-Oct-2014 03:47:16 GMT; path=/; domain=.scorecardresearch.com UIDR=1351655236; expires=Tue, 21-Oct-2014 03:47:16 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /connect/xd_arbiter.php?version=11 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: yQhECnWG7FFdFSav+XhnrvdFaxZRNoL7BQs8fkEkfr8= Content-Length: 9688 Vary: Accept-Encoding Cache-Control: public, max-age=26149841 Expires: Thu, 29 Aug 2013 19:37:57 GMT Date: Wed, 31 Oct 2012 03:47:16 GMT Connection: keep-alive
GET /b2?c1=2&c2=6036316&c3=&c4=&c5=&c6=&c15=&ns__t=1351655236877&ns_c=UTF-8&c8=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&c7=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&c9= HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=2&c2=6036316&c3=&c4=&c5=&c6=&c15=&ns__t=1351655236877&ns_c=UTF-8&c8=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&c7=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&c9= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: UID=ab9c89d-195.159.219.9-1351655236; UIDR=1351655236	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Wed, 31 Oct 2012 03:47:16 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /pagead/ads?client=ca-pub-6676241418785266&format=728x15_0ads_al_s&output=html&h=15&w=728&lmt=1351655234&channel=3309604794&ea=0&alt_color=FFFFFF&color_bg=FFFFFF&color_border=FFFFFF&color_link=273595&color_text=000000&color_url=273595&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655235990&bpp=10&shv=r20121023&jsv=r20110914&correlator=1351655236527&frm=20&adk=1899358758&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=216&ady=259&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=543 HTTP/1.1 Host: googleads.g.doubleclick.net GET /pagead/ads?client=ca-pub-6676241418785266&format=728x15_0ads_al_s&output=html&h=15&w=728&lmt=1351655234&channel=3309604794&ea=0&alt_color=FFFFFF&color_bg=FFFFFF&color_border=FFFFFF&color_link=273595&color_text=000000&color_url=273595&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655235990&bpp=10&shv=r20121023&jsv=r20110914&correlator=1351655236527&frm=20&adk=1899358758&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=216&ady=259&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=543 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Wed, 31 Oct 2012 03:47:16 GMT Server: cafe Cache-Control: private Content-Length: 1884 X-XSS-Protection: 1; mode=block
GET /s2/oz/images/stars/po/Publisher/sprite4-a67f741843ffc4220554c34bd01bb0bb.png HTTP/1.1 Host: ssl.gstatic.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 13 Sep 2012 21:47:55 GMT Date: Thu, 25 Oct 2012 07:20:32 GMT Expires: Fri, 25 Oct 2013 07:20:32 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 21399 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 505604
GET /collect/?time=1351655236910&pid=438&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&pageUrl=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&ref=&fmt=js HTTP/1.1 Host: www.bizographics.com GET /collect/?time=1351655236910&pid=438&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&pageUrl=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&ref=&fmt=js HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Cache-Control: no-cache Content-Language: en-US Date: Wed, 31 Oct 2012 03:47:36 GMT P3P: CP="NON DSP COR CURa ADMo DEVo TAIo PSAo PSDo OUR DELa IND PHY ONL UNI COM NAV DEM" Pragma: no-cache Server: nginx/1.2.0 Set-Cookie: BizoID=7759f93c-26b7-4baa-a928-58363acfe483; Domain=.bizographics.com; Expires=Wed, 01-May-2013 15:47:36 GMT; Path=/ BizoData=aanxIsTWdcs71QFrEtish9dQb1MaQBj6WV4QlNoWqeHUqwKPXXDYVmk6W48vvQFWvELdSO08xXBSdkf8kozH7KaP9ZjZFQisvpaj5XcunNcMDa7Re6IGD4lMe9xDEPZ2QbAd6xyMUDLG60DXBtcKIKf2UKBOD5duiipPsKyaOXpMAce2MNOb54mfXnS9ty8xAR0zwQvdHhisgnnwCNICmFKGa6pvfuPrL6gLiif3K3nnDdM4jBDRPIWisbMVY29FCvycXMkAE50cjpb8jfQz8eEWCdiiBV8aP16KaDF8q1pAdCLSvYvnhUR54N9wl3RK8Gv0YiiC; Domain=.bizographics.com; Expires=Wed, 01-May-2013 15:47:36 GMT; Path=/ BizoNetworkPartnerIndex=-1; Domain=.bizographics.com; Expires=Thu, 01-Nov-2012 00:00:00 GMT; Path=/ Content-Length: 851 Connection: keep-alive
GET /pixel?google_nid=bizo_bk_cm&google_cm HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=bizo_bk_cm&google_cm HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://imp2.bizographics.com/m/1640?google_gid=CAESEI0AfbA0cKdCk-CoRkrffEs&google_cver=1 Date: Wed, 31 Oct 2012 03:47:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 289 X-XSS-Protection: 1; mode=block
GET /seg?t=2&add=&redir=http%3A%2F%2Fib.adnxs.com%2Fseg%3Fadd%3D%26add_code%3Dfileforum_betanews_com%2Cbetanews_com%26member%3D232%26redir%3Dhttp%253A%252F%252Fib.adnxs.com%252Fgetuid%253Fhttp%25253A%25252F%25252Fimp2.bizographics.com%25252Fu%25253Fan_user_id%25253D%252524UID HTTP/1.1 Host: ib.adnxs.com GET /seg?t=2&add=&redir=http%3A%2F%2Fib.adnxs.com%2Fseg%3Fadd%3D%26add_code%3Dfileforum_betanews_com%2Cbetanews_com%26member%3D232%26redir%3Dhttp%253A%252F%252Fib.adnxs.com%252Fgetuid%253Fhttp%25253A%25252F%25252Fimp2.bizographics.com%25252Fu%25253Fan_user_id%25253D%252524UID HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Tue, 29-Jan-2013 03:47:17 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Thu, 01-Nov-2012 03:47:17 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG5EfCxrx)0s]#%2L_'x%SEV/hnKD(Um`lD$aWqNdWhK:b-Z]D; path=/; expires=Tue, 29-Jan-2013 03:47:17 GMT; domain=.adnxs.com; HttpOnly Location: http://ib.adnxs.com/seg?add=&add_code=fileforum_betanews_com,betanews_com&member=232&redir=http%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttp%253A%252F%252Fimp2.bizographics.com%252Fu%253Fan_user_id%253D%2524UID Date: Wed, 31 Oct 2012 03:47:17 GMT Content-Length: 0
GET /c/1351655236875/c.js?&t=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&p=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&r=&aid=10959&chaid=netshelter-2 HTTP/1.1 Host: dnetshelter2.d.chango.com GET /c/1351655236875/c.js?&t=Download%20Malwarebytes%27%20Anti-Malware%20for%20free%20-%20Fileforum&p=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&r=&aid=10959&chaid=netshelter-2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Content-Length: 0 Server: RTB Location: /c/rt.js?p=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&chaid=netshelter-2&t=Download+Malwarebytes%27+Anti-Malware+for+free+-+Fileforum&aid=10959&is_new_user=true Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=aa2ce994-230d-11e2-bbda-0025900b3914; Domain=chango.com; expires=Sat, 29 Oct 2022 03:47:17 GMT; Path=/ Connection: close
GET /seg?add=&add_code=fileforum_betanews_com,betanews_com&member=232&redir=http%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttp%253A%252F%252Fimp2.bizographics.com%252Fu%253Fan_user_id%253D%2524UID HTTP/1.1 Host: ib.adnxs.com GET /seg?add=&add_code=fileforum_betanews_com,betanews_com&member=232&redir=http%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttp%253A%252F%252Fimp2.bizographics.com%252Fu%253Fan_user_id%253D%2524UID HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG5EfCxrx)0s]#%2L_'x%SEV/hnKD(Um`lD$aWqNdWhK:b-Z]D; sess=1	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Tue, 29-Jan-2013 03:47:17 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Thu, 01-Nov-2012 03:47:17 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG5EfCxrx)0s]#%2L_'x%SEV/hnKD(Um`lD$aWqNdWhK:b-Z]D; path=/; expires=Tue, 29-Jan-2013 03:47:17 GMT; domain=.adnxs.com; HttpOnly Location: http://ib.adnxs.com/getuid?http%3A%2F%2Fimp2.bizographics.com%2Fu%3Fan_user_id%3D%24UID Date: Wed, 31 Oct 2012 03:47:17 GMT Content-Length: 0
GET /pixel?partnerID=12&key=segment&code=H9K HTTP/1.1 Host: segment-pixel.invitemedia.com GET /pixel?partnerID=12&key=segment&code=H9K HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Wed, 31 Oct 2012 03:47:17 GMT Set-Cookie: uid=fac58ab3-0e27-4bb8-965c-c5b64ccbb314;Path=/;Domain=invitemedia.com;Expires=Thu, 31-Oct-2013 03:47:17 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Location: http://cm.g.doubleclick.net/pixel?google_nid=invitemedia&google_cm&google_hm=-sWKsw4nS7iWXMW2TMuzFA== Content-Length: 0 Connection: close Server: Jetty(7.3.1.v20110307)
GET /getuid?http%3A%2F%2Fimp2.bizographics.com%2Fu%3Fan_user_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG5EfCxrx)0s]#%2L_'x%SEV/hnKD(Um`lD$aWqNdWhK:b-Z]D; sess=1	HTTP/1.1 302 Moved Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Tue, 29-Jan-2013 03:47:17 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Thu, 01-Nov-2012 03:47:17 GMT; domain=.adnxs.com; HttpOnly Location: http://imp2.bizographics.com/u?an_user_id=5858721859426781856 Date: Wed, 31 Oct 2012 03:47:17 GMT Content-Length: 0
GET /pixel?google_nid=invitemedia&google_cm&google_hm=-sWKsw4nS7iWXMW2TMuzFA== HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=invitemedia&google_cm&google_hm=-sWKsw4nS7iWXMW2TMuzFA== HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://g-pixel.invitemedia.com/gmatcher?google_gid=CAESEE5Cd4RhtyLOx5zauejuLUM&google_cver=1 Date: Wed, 31 Oct 2012 03:47:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 293 X-XSS-Protection: 1; mode=block
POST / HTTP/1.1 Host: ocsp.verisign.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	HTTP/1.0 200 Ok Content-Type: application/ocsp-response Last-Modified: Sun, 28 Oct 2012 08:55:43 GMT Expires: Sun, 04 Nov 2012 08:55:43 GMT Content-Transfer-Encoding: binary Content-Length: 1814 Cache-Control: max-age=364106, public, no-transform, must-revalidate Date: Wed, 31 Oct 2012 03:47:17 GMT nncoection: close Connection: Keep-Alive
GET /m/1640?google_gid=CAESEI0AfbA0cKdCk-CoRkrffEs&google_cver=1 HTTP/1.1 Host: imp2.bizographics.com GET /m/1640?google_gid=CAESEI0AfbA0cKdCk-CoRkrffEs&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: BizoID=7759f93c-26b7-4baa-a928-58363acfe483; BizoData=aanxIsTWdcs71QFrEtish9dQb1MaQBj6WV4QlNoWqeHUqwKPXXDYVmk6W48vvQFWvELdSO08xXBSdkf8kozH7KaP9ZjZFQisvpaj5XcunNcMDa7Re6IGD4lMe9xDEPZ2QbAd6xyMUDLG60DXBtcKIKf2UKBOD5duiipPsKyaOXpMAce2MNOb54mfXnS9ty8xAR0zwQvdHhisgnnwCNICmFKGa6pvfuPrL6gLiif3K3nnDdM4jBDRPIWisbMVY29FCvycXMkAE50cjpb8jfQz8eEWCdiiBV8aP16KaDF8q1pAdCLSvYvnhUR54N9wl3RK8Gv0YiiC; BizoNetworkPartnerIndex=-1	HTTP/1.1 200 OK Content-Type: image/gif;charset=UTF-8 Cache-Control: no-cache Date: Wed, 31 Oct 2012 03:46:56 GMT P3P: CP="NON DSP COR CURa ADMo DEVo TAIo PSAo PSDo OUR DELa IND PHY ONL UNI COM NAV DEM" Pragma: no-cache Server: nginx/1.2.0 Set-Cookie: BizoUserMatchHistory=1oFfpT62RAr3WSGVEEUr9pQncSvRMpZF3b3In06hQYRLzYFJzoU1Xgieie; Domain=.bizographics.com; Expires=Wed, 01-May-2013 15:46:56 GMT; Path=/ Content-Length: 46 Connection: keep-alive
GET /adscores/r2.pixel?sid=9211600578&_rs=1581232 HTTP/1.1 Host: adadvisor.net GET /adscores/r2.pixel?sid=9211600578&_rs=1581232 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Date: Wed, 31 Oct 2012 03:47:17 GMT Connection: close Server: AAWebServer P3P: policyref="http://www.adadvisor.net/w3c/p3p.xml",CP="NOI NID" Content-Length: 0 Location: http://www.adadvisor.net/spacer.gif
GET /u?an_user_id=5858721859426781856 HTTP/1.1 Host: imp2.bizographics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: BizoID=7759f93c-26b7-4baa-a928-58363acfe483; BizoData=aanxIsTWdcs71QFrEtish9dQb1MaQBj6WV4QlNoWqeHUqwKPXXDYVmk6W48vvQFWvELdSO08xXBSdkf8kozH7KaP9ZjZFQisvpaj5XcunNcMDa7Re6IGD4lMe9xDEPZ2QbAd6xyMUDLG60DXBtcKIKf2UKBOD5duiipPsKyaOXpMAce2MNOb54mfXnS9ty8xAR0zwQvdHhisgnnwCNICmFKGa6pvfuPrL6gLiif3K3nnDdM4jBDRPIWisbMVY29FCvycXMkAE50cjpb8jfQz8eEWCdiiBV8aP16KaDF8q1pAdCLSvYvnhUR54N9wl3RK8Gv0YiiC; BizoNetworkPartnerIndex=-1	HTTP/1.1 200 OK Content-Type: image/gif;charset=UTF-8 Cache-Control: no-cache Date: Wed, 31 Oct 2012 03:46:56 GMT P3P: CP="NON DSP COR CURa ADMo DEVo TAIo PSAo PSDo OUR DELa IND PHY ONL UNI COM NAV DEM" Pragma: no-cache Server: nginx/1.2.0 Content-Length: 46 Connection: keep-alive
GET /gmatcher?google_gid=CAESEE5Cd4RhtyLOx5zauejuLUM&google_cver=1 HTTP/1.1 Host: g-pixel.invitemedia.com GET /gmatcher?google_gid=CAESEE5Cd4RhtyLOx5zauejuLUM&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: uid=fac58ab3-0e27-4bb8-965c-c5b64ccbb314	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 31 Oct 2012 03:47:17 GMT Set-Cookie: exchange_uid="eyI0IjpbIkNBRVNFRTVDZDRSaHR5TE94NXphdWVqdUxVTSIsNzM0ODA3XX0=";Version=1;Path=/;Domain=invitemedia.com;Expires=Thu, 31-Oct-2013 03:47:17 GMT;Max-Age=31536000 impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 43 Connection: close Server: Jetty(7.3.1.v20110307)
GET /pixel?adv=76762&code=H9K&t=2&code=fileforum.betanews.com&code=betanews.com HTTP/1.1 Host: ad.yieldmanager.com GET /pixel?adv=76762&code=H9K&t=2&code=fileforum.betanews.com&code=betanews.com HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 31 Oct 2012 03:47:17 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0651.rm.bf1 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: uid=uid=aa432326-230d-11e2-bf0b-efa4a5891e37&_hmacv=1&_salt=3267434037&_keyid=k1&_hmac=c4f143b79ca5259222bceec1ebc5f080df0c9867; path=/; expires=Fri, 30-Nov-2012 03:47:17 GMT Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Wed, 31 Oct 2012 03:47:17 GMT Expires: Wed, 31 Oct 2012 03:47:17 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /c/rt.js?p=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&chaid=netshelter-2&t=Download+Malwarebytes%27+Anti-Malware+for+free+-+Fileforum&aid=10959&is_new_user=true HTTP/1.1 Host: dnetshelter2.d.chango.com GET /c/rt.js?p=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&chaid=netshelter-2&t=Download+Malwarebytes%27+Anti-Malware+for+free+-+Fileforum&aid=10959&is_new_user=true HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: _t=aa2ce994-230d-11e2-bbda-0025900b3914	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 0 Server: RTB Etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Connection: close
GET /pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com HTTP/1.1 Host: googleads.g.doubleclick.net GET /pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1 Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Wed, 31 Oct 2012 03:47:17 GMT Server: cafe Cache-Control: private Content-Length: 6653 X-XSS-Protection: 1; mode=block
GET /pagead/images/adchoices/en.png HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com If-None-Match: 8618641207806323095	HTTP/1.1 304 Not Modified HTTP/1.1 304 Not Modified Date: Tue, 30 Oct 2012 07:27:48 GMT Expires: Wed, 31 Oct 2012 07:27:48 GMT Age: 73169 Etag: 8618641207806323095 Server: GFE/2.0
GET /dialog/oauth?client_id=186889291361652&response_type=token%2Csigned_request%2Ccode&display=none&domain=fileforum.betanews.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D11%23cb%3Df3d070e3851d09e%26origin%3Dhttp%253A%252F%252Ffileforum.betanews.com%252Ff16e70b77016772%26domain%3Dfileforum.betanews.com%26relation%3Dparent&sdk=joey HTTP/1.1 Host: www.facebook.com GET /dialog/oauth?client_id=186889291361652&response_type=token%2Csigned_request%2Ccode&display=none&domain=fileforum.betanews.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D11%23cb%3Df3d070e3851d09e%26origin%3Dhttp%253A%252F%252Ffileforum.betanews.com%252Ff16e70b77016772%26domain%3Dfileforum.betanews.com%26relation%3Dparent&sdk=joey HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=11#cb=f3d070e3851d09e&origin=http%3A%2F%2Ffileforum.betanews.com%2Ff16e70b77016772&domain=fileforum.betanews.com&relation=parent&error=unknown_user Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-FB-Debug: azKsy0NKEwJzlQHGkhs9lKFxR4E2Dw6jTikVaD81DUE= Date: Wed, 31 Oct 2012 03:47:17 GMT Connection: keep-alive Content-Length: 0
GET /pagead/images/adchoices/icon.png HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com If-None-Match: 426692510519060060	HTTP/1.1 304 Not Modified HTTP/1.1 304 Not Modified Date: Tue, 30 Oct 2012 07:22:11 GMT Expires: Wed, 31 Oct 2012 07:22:11 GMT Age: 73506 Etag: 426692510519060060 Server: GFE/2.0
GET /pagead/js/r20121023/r20110914/abg.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Etag: 5725237117596964362 Date: Fri, 26 Oct 2012 19:58:50 GMT Expires: Fri, 09 Nov 2012 19:58:50 GMT X-Content-Type-Options: nosniff Content-Disposition: attachment Content-Encoding: gzip Server: cafe Content-Length: 327 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=1209600 Age: 373707
GET /spacer.gif HTTP/1.1 Host: www.adadvisor.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 31 Oct 2012 03:47:17 GMT Connection: close Server: AAWebServer P3P: policyref="http://www.adadvisor.net/w3c/p3p.xml",CP="NOI NID" Content-Length: 43
GET /simgad/7447699519230220272 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 10 Aug 2012 07:54:16 GMT Date: Wed, 31 Oct 2012 03:47:17 GMT Expires: Thu, 31 Oct 2013 03:47:17 GMT Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22294 X-XSS-Protection: 1; mode=block
GET /pagead/drt/s?v=r20120211 HTTP/1.1 Host: googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-Frame-Options: ALLOWALL X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Wed, 31 Oct 2012 03:38:08 GMT Server: safe Content-Length: 141 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=3600 Age: 549
GET /pagead/drt/ui HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://googleads.g.doubleclick.net/pagead/drt/si?p=CAA&ut=AFAKxlQAAAAAUJCiyRvEB7cjgDgGJPWNm_Bx8LY4X1kU Cache-Control: private X-Frame-Options: ALLOWALL X-Content-Type-Options: nosniff Date: Wed, 31 Oct 2012 03:47:17 GMT Server: safe Content-Length: 304 X-XSS-Protection: 1; mode=block
GET /bg/4G9Wrs00U1VDR2n554I3ZaqsEb6eVQHiyr-SwTUWeeM.js HTTP/1.1 Host: www.gstatic.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6676241418785266&output=html&h=250&slotname=9170927344&w=300&lmt=1351655234&flash=10.0.45&url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&dt=1351655236201&bpp=4&shv=r20121023&jsv=r20110914&prev_fmts=728x15_0ads_al_s&correlator=1351655236527&frm=20&adk=125814845&ga_vid=15727571.1351655236&ga_sid=1351655236&ga_hid=742868084&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=13&adx=770&ady=316&biw=1159&bih=778&oid=3&fu=0&ifi=2&dtd=572&xpc=VKFk7Qn6AQ&p=http%3A//fileforum.betanews.com	HTTP/1.1 200 OK Content-Type: text/javascript Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Wed, 17 Oct 2012 01:18:42 GMT Date: Fri, 26 Oct 2012 17:50:09 GMT Expires: Sat, 03 Nov 2012 17:50:09 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 3267 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=691200 Age: 381428
GET /ping.js?url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&id=b0979864e7&u=mozilla%2F5.0%20(windows%3B%20u%3B%20windows%20nt%206.1%3B%20en-us%3B%20rv%3A1.9.2.13)%20gecko%2F20101203%20firefox%2F3.6.13&x=1351655237432&c=0&t=0&v=0&m=0&vn=2.1.2 HTTP/1.1 Host: ping.crowdscience.com GET /ping.js?url=http%3A%2F%2Ffileforum.betanews.com%2Fdownload%2FMalwarebytes-AntiMalware%2F1186760019%2F1&id=b0979864e7&u=mozilla%2F5.0%20(windows%3B%20u%3B%20windows%20nt%206.1%3B%20en-us%3B%20rv%3A1.9.2.13)%20gecko%2F20101203%20firefox%2F3.6.13&x=1351655237432&c=0&t=0&v=0&m=0&vn=2.1.2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1	HTTP/1.1 200 OK Content-Type: text/plain Content-Encoding: gzip Date: Wed, 31 Oct 2012 03:47:18 GMT P3P: CP="NOI DSP COR NID DEVa PSAi OUR STP OTC",policyref="/w3c/p3p.xml" Server: Apache Set-Cookie: __csv=e41e133dce41263b; Domain=.crowdscience.com; expires=Tue, 29 Jan 2013 03:47:18; Path=/ Vary: Accept-Encoding Content-Length: 321 Connection: keep-alive
GET /favicon.ico HTTP/1.1 Host: fileforum.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40; __utma=37581239.15727571.1351655236.1351655236.1351655236.1; __utmb=37581239; __utmc=37581239; __utmz=37581239.1351655236.1.1.utmccn=(direct)\|utmcsr=(direct)\|utmcmd=(none); _bizo_bzid=7759f93c-26b7-4baa-a928-58363acfe483; _bizo_cksm=F78D0C6AC7B6171E; _bizo_np_stats=1640%3D206%2C155%3D258%2C85%3D269%2C217%3D293%2C2087%3D491%2C; __csref=; __cst=3834977179ffef38; __csv=e41e133dce41263b\|0; __csnv=5aa16323d875f68d; __ctl=e41e133dce41263b1	HTTP/1.1 200 OK Content-Type: image/x-icon Date: Wed, 31 Oct 2012 03:47:17 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch Last-Modified: Wed, 02 Jun 2004 01:57:09 GMT Etag: "19b3bd-8f6-3dbd7020d2740" Accept-Ranges: bytes Content-Length: 2294 Connection: close
GET /softsell/visitor.cgi?affiliate=10793&action=site&vendor=12128&ref=http%3A%2F%2Ffileforum.betanews.com%2Fsendfile%2F1186760019%2F1%2F1351655234.f72f8c5835efc2fb55531a989b089d7c10971d78%2Fmbam-setup-1.65.1.1000.exe HTTP/1.1 Host: www.regnow.com GET /softsell/visitor.cgi?affiliate=10793&action=site&vendor=12128&ref=http%3A%2F%2Ffileforum.betanews.com%2Fsendfile%2F1186760019%2F1%2F1351655234.f72f8c5835efc2fb55531a989b089d7c10971d78%2Fmbam-setup-1.65.1.1000.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 31 Oct 2012 03:47:18 GMT Server: Apache/2.2.17 (Unix) DAV/2 mod_apreq2-20090110/2.7.1 mod_perl/2.0.4 Perl/v5.12.2 Set-Cookie: visitor=1222084347; path=/; expires=Tue, 29 Jan 2013 03:47:18 GMT BIGipServerp-dc2-c5-regnow-active=223182858.24350.0000; path=/ P3P: policyref="/w3c/p3p.xml", CP="CAO DSP TAIa OUR IND UNI PUR COM NAV CNT STA PRE" Location: http://fileforum.betanews.com/sendfile/1186760019/1/1351655234.f72f8c5835efc2fb55531a989b089d7c10971d78/mbam-setup-1.65.1.1000.exe Content-Length: 452 X-Cnection: close
GET /sendfile/1186760019/1/1351655234.f72f8c5835efc2fb55531a989b089d7c10971d78/mbam-setup-1.65.1.1000.exe HTTP/1.1 Host: fileforum.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40; __utma=37581239.15727571.1351655236.1351655236.1351655236.1; __utmb=37581239; __utmc=37581239; __utmz=37581239.1351655236.1.1.utmccn=(direct)\|utmcsr=(direct)\|utmcmd=(none); _bizo_bzid=7759f93c-26b7-4baa-a928-58363acfe483; _bizo_cksm=F78D0C6AC7B6171E; _bizo_np_stats=1640%3D206%2C155%3D258%2C85%3D269%2C217%3D293%2C2087%3D491%2C; __csref=; __cst=3834977179ffef38; __csv=e41e133dce41263b\|0; __csnv=5aa16323d875f68d; __ctl=e41e133dce41263b1	HTTP/1.1 302 Found Content-Type: text/html Date: Wed, 31 Oct 2012 03:47:18 GMT Server: Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze3 with Suhosin-Patch X-Powered-By: PHP/5.3.3-7+squeeze3 Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Wed, 31 Oct 2012 03:47:18 GMT Cache-Control: private, must-revalidate, pre-check=0, post-check=0 Pragma: no-cache Location: http://download.betanews.com/download/1186760019-1/mbam-setup-1.65.1.1000.exe Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 20 Connection: close
GET /download/1186760019-1/mbam-setup-1.65.1.1000.exe HTTP/1.1 Host: download.betanews.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: sixsession=ggrfe2kqju5vlh5d99275kmir881oo40	HTTP/1.1 200 OK Content-Type: application/x-msdos-program Date: Wed, 31 Oct 2012 03:47:19 GMT Server: Apache/2.2.3 (Debian) PHP/4.4.9 Last-Modified: Wed, 17 Oct 2012 05:41:44 GMT Etag: "251c006-a2cf80-b9c97600" Accept-Ranges: bytes Content-Length: 10669952 Connection: close
GET /pagead/drt/si?p=CAA&ut=AFAKxlQAAAAAUJCiyRvEB7cjgDgGJPWNm_Bx8LY4X1kU HTTP/1.1 Host: googleads.g.doubleclick.net GET /pagead/drt/si?p=CAA&ut=AFAKxlQAAAAAUJCiyRvEB7cjgDgGJPWNm_Bx8LY4X1kU HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42